Static task
static1
Behavioral task
behavioral1
Sample
b69a3ba59af3f640ede9c141b7e2300b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b69a3ba59af3f640ede9c141b7e2300b_JaffaCakes118
-
Size
1.5MB
-
MD5
b69a3ba59af3f640ede9c141b7e2300b
-
SHA1
90fccf9090ffc201810f472f7684f039cd85aede
-
SHA256
76a3608d33b3742530cb3f47940fdaf189dfd47d0c7ae562507274a9e8e0d80b
-
SHA512
43d7af89532d64426c5d35d6852628d5975d9f626646989261b220ba0c43d059a9900f335490bcba9ec2574cea0f5e0e04151e04e533cde652690d4be66d2d76
-
SSDEEP
49152:LCEwatMjyI8LjSUhJHXtVLd2p69TvOVN1D:OEr8yVLnhJ3T2KmN1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b69a3ba59af3f640ede9c141b7e2300b_JaffaCakes118
Files
-
b69a3ba59af3f640ede9c141b7e2300b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 794KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE